Sap Cloud Connector
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_cloud_connector:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Cloud Connector (180e45fc-0a8e-5798-a23b-674006f31f86) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-42955 |
vulnerable | 2026-06-08 07:25:08.456502 |
Missing authorization check in SAP Cloud Connector
LOW (3.5)
Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of the service. Confidentiality and integrity of the data are not affected.
Published: 2025-08-12T02:09:43.806Z
Updated: 2025-08-13T20:20:00.811Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25642 |
vulnerable | 2026-06-08 06:31:23.642812 |
Improper Certificate Validation in SAP Cloud Connector
HIGH (7.4)
Due to improper validation of certificate in SAP Cloud Connector - version 2.0, attacker can impersonate the genuine servers to interact with SCC breaking the mutual authentication. Hence, the attacker can intercept the request to view/modify sensitive information. There is no impact on the availability of the system.
Published: 2024-02-13T02:44:20.284Z
Updated: 2025-05-08T15:49:42.852Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49578 |
vulnerable | 2026-06-08 06:14:29.194938 |
Denial of service (DOS) in SAP Cloud Connector
LOW (3.5)
SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application.
Published: 2023-12-12T01:08:32.245Z
Updated: 2024-10-09T13:25:33.422Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33695 |
vulnerable | 2026-06-08 05:32:12.167760 |
Details available
MEDIUM (6.8)
Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.
Published: 2021-09-15T18:01:44.000Z
Updated: 2024-08-03T23:58:22.261Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33694 |
vulnerable | 2026-06-08 05:32:12.167417 |
Details available
MEDIUM (5.9)
SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting.
Published: 2021-09-15T18:01:49.000Z
Updated: 2024-08-03T23:58:22.910Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33693 |
vulnerable | 2026-06-08 05:32:12.166936 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33692 |
vulnerable | 2026-06-08 05:32:12.165247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0247 |
vulnerable | 2026-06-08 05:12:19.504741 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0246 |
vulnerable | 2026-06-08 05:12:19.503823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.